CVE-2026-14255: IFC File Parsing Uncontrolled Recursion in Certain Autodesk Products
A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerability to cause the application to terminate unexpectedly, resulting in a denial-of-service. Exploitation requires a user to open a specially crafted IFC file.
Affected Software
Event History
Frequently Asked Questions
What must an attacker do to trigger the issue?
The attacker must provide a specially crafted IFC file and persuade a user to open it in an affected Autodesk product. The attack requires user interaction and is locally triggered.
Does exploitation require authentication or elevated privileges?
No privileges are required according to the CVSS vector. However, successful exploitation still depends on a user opening the malicious IFC file.
What is the expected security impact?
The reported impact is high availability impact: the affected application may terminate unexpectedly. No confidentiality or integrity impact is indicated by the CVSS vector.